Cybercrime: Why a modern tech stack is indispensable
Modern technological developments rapidly follow each other, forcing companies to take an increasingly critical look at their IT landscape. The philosophy “to stand still is to go backwards” applies more than ever, and modernizing the software, frameworks and infrastructure (in short, as a ‘tech stack’) is not a luxury but a pure necessity to remain competitive and relevant as a company.
But it is not only the strengthening of the company’s position that requires a modern tech stack. Cyber attacks, such as Ransomware attacks or large-scale data abuse, have increased enormously in recent years, and their impact is becoming increasingly intense. How do you deal with this as a company? What measures can you take? Dick van Straaten, Director of Cloud & IoT at LINKIT and Certified Ethical Hacker, explains the essential security reasons and how to minimize potential risks proactively.
Supplier support
“The older the application, the more vulnerable the organization,” Dick begins. “And that is the most important argument for renewing the tech stack: the support from the supplier. Old technologies are often no longer supported, even though they contain many vulnerabilities. Organizations benefit from patches and updates that address key security vulnerabilities by keeping software up-to-date, protecting the business from outside threats.”
“The older the application, the more vulnerable the organization.”
During these upgrades, it is essential to also pay direct attention to the security of APIs and integrations with other systems. Dick: “Incorrect configurations or unsafe data transmissions can lead to data leaks or unauthorized access by an unwanted public. By performing security tests and monitoring API traffic for suspicious activities, potential vulnerabilities are detected quickly, and preventive measures can be taken.”
Stronger encryption and authentication
It’s organizations’ biggest fear: sensitive data falling into the hands of criminals. And the older the software, the more likely it has security vulnerabilities that allow criminals to intercept this data efficiently.
A modern tech stack often offers better encryption and security protocols, such as Transport Layer Security (TLS) for web applications. “Modern software offers advanced authentication and authorization methods,” says Dick. “Think, for example, of Multi-Factor Authentication (MFA) and Just-In-Time Privileged Access (JIT). These features strengthen access control and reduce the risk of unauthorized access to sensitive data and systems.”
Changing laws and regulations
Securing your infrastructure is not just about external threats. Many organizations also need help with constantly changing laws and regulations. Regulations are becoming increasingly strict, especially in the financial and healthcare sectors. Complying with them is often complex, especially when the organization runs on outdated software.
According to Dick, implementing new software can help with this. “An up-to-date landscape supports companies to keep up. Modern software has built-in (security) features that help organizations comply with changing legislation, relevant regulations and new regulations.”
“Modern software comes with built-in security features that help organizations comply with changing legislation, relevant regulations and new regulations.”
Zero-day attacks
A common threat to organizations is the zero-day attack. Software often has specific weaknesses, which hackers exploit to cause damage. To address vulnerabilities, patches are regularly launched to fix the issues. However, sometimes hackers discover vulnerabilities before software developers do. Until this weakness is addressed, hackers can “take advantage” of the code (also known as “exploit code”).
Dick: “Modern stacks can help against these attacks in several ways, although it is important to note that there is no perfect solution to mitigate the risks completely. Hackers also ‘work’ according to the best practices principle, meaning it remains a cat-and-mouse game. Yet it is true that modern software performs certain security or protection scans so that you better arm your organization against unwanted intruders.”
Increase awareness of security risks.
In addition to the technological applications, employees have an essential role. In Dick’s eyes, they must master new tools, technologies and processes. “Insufficient training can lead, for example, to incorrect configurations of security settings or unsafe data handling. By having employees acquire the right knowledge and skills, awareness of security risks is increased.”
Combining a modern tech stack with high awareness among people reduces potential risks, says Dick. “You increase business assets by keeping up with the latest security technologies and strengthening your organisation’s digital walls. In my view, that is also the overall conclusion: a modern IT environment is not only about keeping up with the times and technologies, but it is also necessary to make your organization more secure in the cyber area – something more crucial than ever today.”
“In effect, you increase business assets by keeping up with the latest security technologies and the digital walls around your organization are strengthened.”
Dick van Straaten
Director Cloud & IoT (LINKIT)
Dick (54) has worked at LINKIT since 2021 and is ultimately responsible for the Cloud & IoT squad. He advises clients and partners on strategy and business issues with his team. He shares his in-depth cloud and Microsoft knowledge.
Want to know more? Follow Dick on LinkedIn, where he shares his valuable insights.
